What is Insecure Direct Object Reference (IDOR)?

Insecure Direct Object Reference (IDOR) is a vulnerability where an application exposes a reference to an internal implementation object, such as a file or database key, without proper authorization checks. This can lead to unauthorized access and potentially privilege escalation.

Related terms